{"action":"Upgrade org.apache.kylin:kylin to 5.0.2 or later.","affected":[{"fixed":"5.0.2","introduced":"4.0.0"}],"component":"org.apache.kylin:kylin","cve_ids":["CVE-2025-30067"],"ecosystem":"Maven","epss":0.00927,"exploited":false,"fixed_versions":["5.0.2"],"ghsa_id":"GHSA-29m8-wh9p-5wc4","id":"tcs_01M5N8660Q7E8EEN4TVE6F8VRN","modified_at":"2025-03-27T18:48:50.547924Z","published_at":"2025-03-27T15:31:14Z","references":["https://osv.dev/vulnerability/GHSA-29m8-wh9p-5wc4","https://nvd.nist.gov/vuln/detail/CVE-2025-30067","https://github.com/apache/kylin/commit/21d98f3ef29f71b50dacabbf039905f9f0f71b95","https://github.com/apache/kylin","https://issues.apache.org/jira/browse/KYLIN-5994","https://lists.apache.org/thread/6j19pt8yoqfphf1lprtrzoqkvz1gwbnc"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-29m8-wh9p-5wc4","url":"https://osv.dev/vulnerability/GHSA-29m8-wh9p-5wc4"},{"source":"nvd","source_id":"CVE-2025-30067","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30067"}],"summary":"Apache Kylin Code Injection via JDBC Configuration Alteration"}